fix(tailscale): stop leaking the preauth key in failure output

jfraeys commented

2026-10-02 18:59:20 -04:00

Owner

The tailscale up command line carries --authkey and Ansible printed it in full when the join failed (e.g. 'authkey expired'), leaking a preauth key into the provisioner journal. The task is now no_log, with a separate task that fails with stderr only (which never contains the key). Note added to roles/tailscale/CLAUDE.md.

Not run against a real host.

🤖 Generated with Claude Code

The tailscale up command line carries --authkey and Ansible printed it in full when the join failed (e.g. 'authkey expired'), leaking a preauth key into the provisioner journal. The task is now no_log, with a separate task that fails with stderr only (which never contains the key). Note added to roles/tailscale/CLAUDE.md. Not run against a real host. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

jfraeys added 1 commit

2026-10-02 18:59:20 -04:00

fix(tailscale): stop leaking the preauth key in failure output e8cd934769

The tailscale up command line carries --authkey; Ansible printed it in full when
the join failed (e.g. 'authkey expired'). no_log the task and fail separately
with stderr, which never contains the key.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

jfraeys merged commit b871805951 into main

2026-10-02 19:01:15 -04:00

jfraeys referenced this pull request from a commit

2026-10-02 19:01:17 -04:00

Merge pull request 'fix(tailscale): stop leaking the preauth key in failure output' (#8) from fix/tailscale-authkey-no-log into main

Rows
Columns

fix(tailscale): stop leaking the preauth key in failure output #8